Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
File:                     ED7D926622C511EE8579CC72C4F9AE02.roa (raw, json)
Hash identifier:          nyv08QSRNJhv3RvW17AH6qbhQ4D5Q9YXzn9YfgnDQT8=
Subject key identifier:   DF:F2:BD:73:7F:37:6A:1F:93:81:DF:E2:F2:1D:75:65:A8:2A:E8:09
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       1385
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
Signing time:             Mon 15 Sep 2025 08:04:22 +0000
ROA not before:           Mon 15 Sep 2025 08:04:22 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9902
IP address blocks:        103.23.136.0/22 maxlen: 22
                          103.23.136.0/24 maxlen: 24
                          103.23.137.0/24 maxlen: 24
                          103.23.138.0/24 maxlen: 24
                          103.23.139.0/24 maxlen: 24
                          103.25.92.0/24 maxlen: 24
                          103.25.93.0/24 maxlen: 24
                          103.25.94.0/24 maxlen: 24
                          103.25.95.0/24 maxlen: 24
                          103.244.248.0/22 maxlen: 22
                          103.244.248.0/24 maxlen: 24
                          103.244.249.0/24 maxlen: 24
                          103.244.250.0/24 maxlen: 24
                          103.244.251.0/24 maxlen: 24
                          110.235.220.0/22 maxlen: 22
                          110.235.220.0/24 maxlen: 24
                          110.235.221.0/24 maxlen: 24
                          110.235.222.0/24 maxlen: 24
                          110.235.223.0/24 maxlen: 24
                          123.108.248.0/21 maxlen: 21
                          123.108.248.0/24 maxlen: 24
                          123.108.249.0/24 maxlen: 24
                          123.108.250.0/24 maxlen: 24
                          123.108.251.0/24 maxlen: 24
                          123.108.252.0/24 maxlen: 24
                          123.108.253.0/24 maxlen: 24
                          123.108.254.0/23 maxlen: 24
                          124.199.112.0/20 maxlen: 20
                          124.199.112.0/24 maxlen: 24
                          124.199.113.0/24 maxlen: 24
                          124.199.114.0/24 maxlen: 24
                          124.199.115.0/24 maxlen: 24
                          124.199.116.0/24 maxlen: 24
                          124.199.117.0/24 maxlen: 24
                          124.199.118.0/24 maxlen: 24
                          124.199.119.0/24 maxlen: 24
                          124.199.120.0/24 maxlen: 24
                          124.199.121.0/24 maxlen: 24
                          124.199.122.0/24 maxlen: 24
                          124.199.123.0/24 maxlen: 24
                          124.199.124.0/24 maxlen: 24
                          124.199.125.0/24 maxlen: 24
                          124.199.126.0/24 maxlen: 24
                          124.199.127.0/24 maxlen: 24
                          163.53.196.0/22 maxlen: 22
                          163.53.196.0/24 maxlen: 24
                          163.53.197.0/24 maxlen: 24
                          163.53.198.0/24 maxlen: 24
                          163.53.199.0/24 maxlen: 24
                          202.124.32.0/24 maxlen: 24
                          202.124.33.0/24 maxlen: 24
                          202.124.34.0/24 maxlen: 24
                          202.124.35.0/24 maxlen: 24
                          202.124.36.0/24 maxlen: 24
                          202.124.37.0/24 maxlen: 24
                          202.124.38.0/24 maxlen: 24
                          202.124.39.0/24 maxlen: 24
                          202.124.40.0/21 maxlen: 21
                          202.124.40.0/24 maxlen: 24
                          202.124.41.0/24 maxlen: 24
                          202.124.42.0/24 maxlen: 24
                          202.124.43.0/24 maxlen: 24
                          202.124.44.0/24 maxlen: 24
                          202.124.45.0/24 maxlen: 24
                          202.124.46.0/24 maxlen: 24
                          202.124.47.0/24 maxlen: 24
                          203.80.160.0/21 maxlen: 21
                          203.80.160.0/24 maxlen: 24
                          203.80.161.0/24 maxlen: 24
                          203.80.162.0/24 maxlen: 24
                          203.80.163.0/24 maxlen: 24
                          203.80.164.0/24 maxlen: 24
                          203.80.165.0/24 maxlen: 24
                          203.80.166.0/24 maxlen: 24
                          203.80.167.0/24 maxlen: 24
                          203.167.16.0/22 maxlen: 24
                          2402:5100::/32 maxlen: 32
                          2402:5100::/48 maxlen: 48
                          2402:5100:1::/48 maxlen: 48
                          2402:5100:2::/48 maxlen: 48
                          2402:5100:3::/48 maxlen: 48
                          2402:5100:4::/48 maxlen: 48
                          2402:5100:5::/48 maxlen: 48
                          2402:5100:6::/47 maxlen: 47
                          2402:5100:6::/48 maxlen: 48
                          2402:5100:8::/45 maxlen: 45
                          2402:5100:10::/44 maxlen: 44
                          2402:5100:20::/43 maxlen: 43
                          2402:5100:40::/42 maxlen: 42
                          2402:5100:80::/41 maxlen: 41
                          2402:5100:100::/40 maxlen: 40
                          2402:5100:200::/39 maxlen: 39
                          2402:5100:400::/38 maxlen: 38
                          2402:5100:800::/37 maxlen: 37
                          2402:5100:a61:9160::/64 maxlen: 64
                          2402:5100:1000::/36 maxlen: 36
                          2402:5100:109a:9c00::/54 maxlen: 54
                          2402:5100:13e4::/49 maxlen: 49
                          2402:5100:19c5:7b1a::/63 maxlen: 63
                          2402:5100:2000::/35 maxlen: 35
                          2402:5100:2000::/36 maxlen: 44
                          2402:5100:2000::/48 maxlen: 48
                          2402:5100:2878:a000::/51 maxlen: 51
                          2402:5100:3051:faf0::/61 maxlen: 61
                          2402:5100:34fa:4000::/50 maxlen: 50
                          2402:5100:3ca1::/52 maxlen: 52
                          2402:5100:4000::/34 maxlen: 34
                          2402:5100:440a:6c00::/54 maxlen: 54
                          2402:5100:4858:8798::/62 maxlen: 62
                          2402:5100:49af:7378::/62 maxlen: 62
                          2402:5100:4dc9:200::/55 maxlen: 55
                          2402:5100:5a54::/48 maxlen: 48
                          2402:5100:5ad0:e000::/51 maxlen: 51
                          2402:5100:5adf:ff00::/56 maxlen: 56
                          2402:5100:5b82:c640::/58 maxlen: 58
                          2402:5100:5f51:8000::/50 maxlen: 50
                          2402:5100:633d:8000::/49 maxlen: 49
                          2402:5100:7944:6230::/60 maxlen: 60
                          2402:5100:7c59:3040::/59 maxlen: 59
                          2402:5100:8000::/33 maxlen: 33
                          2402:5100:82ec:1000::/52 maxlen: 52
                          2402:5100:8a2c:fa80::/58 maxlen: 58
                          2402:5100:8c49:1daf::/64 maxlen: 64
                          2402:5100:913d:267c::/63 maxlen: 63
                          2402:5100:92a8:d800::/53 maxlen: 53
                          2402:5100:92d3:d000::/59 maxlen: 59
                          2402:5100:92ed:82a0::/59 maxlen: 59
                          2402:5100:9674:9800::/53 maxlen: 53
                          2402:5100:968b:9fd0::/61 maxlen: 61
                          2402:5100:96f4:35f2::/63 maxlen: 63
                          2402:5100:97d1:bab4::/62 maxlen: 62
                          2402:5100:9839:d180::/64 maxlen: 64
                          2402:5100:9839:d18b::/64 maxlen: 64
                          2402:5100:98c5::/50 maxlen: 50
                          2402:5100:9a3e:d560::/59 maxlen: 59
                          2402:5100:9ae1:9640::/58 maxlen: 58
                          2402:5100:9b45::/48 maxlen: 48
                          2402:5100:9c24::/48 maxlen: 48
                          2402:5100:9e92:7000::/52 maxlen: 52
                          2402:5100:9f87:ca0::/60 maxlen: 60
                          2402:5100:a595::/49 maxlen: 49
                          2402:5100:a5af:9200::/55 maxlen: 55
                          2402:5100:a6d7:1cd8::/61 maxlen: 61
                          2402:5100:a8d2:8a00::/55 maxlen: 55
                          2402:5100:ac16:2800::/56 maxlen: 56
                          2402:5100:ad38:f128::/63 maxlen: 63
                          2402:5100:af3d:9780::/57 maxlen: 57
                          2402:5100:af82::/48 maxlen: 48
                          2402:5100:b344:1800::/53 maxlen: 53
                          2402:5100:baec::/49 maxlen: 49
                          2402:5100:bd4f::/48 maxlen: 48
                          2402:5100:be38:d980::/57 maxlen: 57
                          2402:5100:bf0d:425e::/64 maxlen: 64
                          2402:5100:c000::/48 maxlen: 48
                          2402:5100:c017:3e00::/57 maxlen: 57
                          2402:5100:c126::/48 maxlen: 48
                          2402:5100:c29b::/48 maxlen: 48
                          2402:5100:c42e:9728::/61 maxlen: 61
                          2402:5100:c8e5:e000::/51 maxlen: 51
                          2402:5100:ca6b:62b0::/60 maxlen: 60
                          2402:5100:d107::/48 maxlen: 48
                          2402:5100:d1a2:dc00::/56 maxlen: 56
                          2402:5100:d360:8000::/50 maxlen: 50
                          2402:5100:d3b2:b800::/53 maxlen: 53
                          2402:5100:d7f6::/48 maxlen: 48
                          2402:5100:d879:7e00::/60 maxlen: 60
                          2402:5100:d8e9:4a04::/62 maxlen: 62
                          2402:5100:dc0e::/54 maxlen: 54
                          2402:5100:dd4c::/48 maxlen: 48
                          2402:5100:e458::/48 maxlen: 48
                          2402:5100:e965:69c0::/58 maxlen: 58
                          2402:5100:ef12:8800::/54 maxlen: 54
                          2402:5100:f116:2200::/56 maxlen: 56
                          2402:5100:f23f:7a80::/57 maxlen: 57
                          2402:5100:f48e::/48 maxlen: 48
                          2402:5100:f71d:2000::/51 maxlen: 51
                          2402:5100:f9ee:8800::/55 maxlen: 55
                          2402:5100:fcbe:3000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4997 (0x1385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
        Validity
            Not Before: Sep 15 08:04:22 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68c7c886-64fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:78:62:d9:cc:15:64:a6:34:97:3f:d2:71:
                    9d:7a:45:35:9d:17:48:c2:6f:19:45:3e:ab:9d:f1:
                    04:c0:ce:90:ec:02:bb:a2:99:49:86:6c:e9:13:4c:
                    9f:07:e7:6e:82:70:89:77:9e:48:f7:a2:f2:64:87:
                    c3:27:08:6f:a7:c9:16:d0:88:e7:94:94:23:9d:b8:
                    34:a6:5e:8d:b7:d4:97:46:fc:e5:ab:2b:1f:c9:8c:
                    c9:63:a1:b0:96:84:24:b5:46:a6:ec:22:66:f4:ec:
                    1c:1d:7b:59:c1:a6:aa:76:fa:4f:3c:36:f3:2f:c4:
                    29:25:4f:9e:87:95:7d:e8:a9:5f:63:79:36:05:1e:
                    ee:52:dc:57:1d:59:bd:87:46:d4:7a:72:08:83:3b:
                    eb:5c:68:7f:c9:a9:26:2b:84:90:4f:8d:f5:9c:40:
                    f8:6b:ca:fa:6a:56:63:34:fd:87:b1:fa:cd:5d:b2:
                    be:c5:77:c0:74:f4:87:ee:6f:c4:c4:10:d0:ab:c5:
                    f3:60:57:ec:ba:8b:e9:7b:93:eb:aa:ff:21:b6:38:
                    a3:4a:38:31:6a:79:7a:ba:91:94:e6:ce:ba:58:ab:
                    3f:a9:86:fb:3f:3c:83:7f:5a:ba:ea:05:3e:ec:05:
                    a4:46:cc:0b:7e:b0:01:9b:12:eb:36:e6:2e:94:aa:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:BD:73:7F:37:6A:1F:93:81:DF:E2:F2:1D:75:65:A8:2A:E8:09
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.136.0/22
                  103.25.92.0/22
                  103.244.248.0/22
                  110.235.220.0/22
                  123.108.248.0/21
                  124.199.112.0/20
                  163.53.196.0/22
                  202.124.32.0/20
                  203.80.160.0/21
                  203.167.16.0/22
                IPv6:
                  2402:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:b3:8f:87:94:ef:ca:1f:f4:81:59:30:3a:19:01:16:0e:75:
         69:a0:64:32:4d:be:60:08:13:86:12:87:62:7c:fc:d9:46:97:
         75:6a:5d:51:25:36:3f:3b:1a:3a:e9:6b:9d:2d:aa:88:bb:5f:
         d8:1e:af:b8:55:4e:34:3d:2b:b5:04:9e:42:5d:b1:1d:09:5b:
         ee:69:03:92:a1:49:7d:bb:95:47:22:f4:d5:2f:83:48:ba:bb:
         d2:54:f0:19:35:f4:b8:14:d5:97:fd:d4:7a:f0:7e:30:f5:ad:
         8f:42:5f:23:b7:2f:14:3f:ce:3b:ef:c6:50:f0:9b:d8:83:bc:
         5e:90:b3:50:70:47:ff:dc:3e:8b:c3:65:68:ab:01:66:53:f2:
         30:9f:d4:84:e4:6d:10:ed:63:06:5b:c2:cb:5c:94:13:fc:a4:
         96:92:33:c8:43:d2:29:98:52:ac:f6:72:3f:25:7c:3e:3b:fd:
         29:fd:85:a3:38:5d:6a:03:78:7a:97:52:c1:4f:34:20:75:d0:
         cb:6b:5c:83:e0:65:a1:f1:e9:27:b8:b7:b1:db:13:77:1c:18:
         b2:07:35:7e:28:35:ce:56:8c:d7:d6:e9:ef:34:dd:8b:3e:35:
         db:03:b4:81:fd:0e:1e:d1:f6:6b:51:b3:00:de:4e:0e:35:0a:
         ff:df:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:16 2025 by rpki-client